CVE-2021-42663

An HTML injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the msg parameter to…

published November 5, 2021

CVSS
—
EPSS
4%
Percentile
90.1
In the wild
Unconfirmed
What it is

An HTML injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the msg parameter to /event-management/index.php. An attacker can leverage this vulnerability in order to change the visibility of the website. Once the target user clicks on a given link he will display the content of the HTML code of the attacker's choice.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03852 · 90.1th percentile
Published
2021-11-05T12:17Z
EPSS history
Timeline
  • 05 NOV 12:17Z
    An HTML injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the msg parameter to…
    cvelistv5